Official Bank 0/205

Splunk Enterprise Certified Architect Exam (SPLK-2002) - Splunk Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
205 Total Questions
1
Question
Which Splunk log file would be the least helpful in troubleshooting a crash?
Options
A splunk_instrumentation.log
B crash-2022-05-13-ll:42:57.1og
C splunkd.log
D splunkd_stderr.log
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
A multi-site indexer cluster can be configured using which of the following? (Select all that apply.)
Select 4
Options
A Via Splunk Web.
B Run a Splunk edit cluster-config command from the CLI.
C Directly edit SPLUNK_HOME/etc/system/default/server.conf
D Directly edit SPLUNK_HOME/etc./system/local/server.conf
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
A Splunk instance has crashed, but no crash log was generated. There is an attempt to determine what user activity caused the crash by running the following search:

Exhibit

What does searching for closed_txn=0 do in this search?
Options
A Filters results to situations where Splunk was stopped and then immediately restarted.
B Filters results to situations where Splunk was started and stopped multiple times.
C Filters results to situations where Splunk was started, but not stopped.
D Filters results to situations where Splunk was started and stopped once.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which of the following are client filters available in serverclass.conf? (Select all that apply.)
Select 4
Options
A DNS name.
B Splunk server role.
C Platform (machine type).
D IP address.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Which of the following are possible causes of a crash in Splunk? (select all that apply)
Select 4
Options
A Insufficient memory.
B Incorrect ulimit settings.
C Running out of disk space.
D Insufficient disk IOPS.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.